simple_openid_connect.flows.client_credentials_grant

The *Client Credentials Grant* (sometimes called Service Account Authentication) implementation.

This grant enables a client to retrieve tokens dedicated to the client and not to a specific user.

Functions

authenticate(token_endpoint, scope, ...)

Retrieve a token that is dedicated to the authenticated client from the provider.
simple_openid_connect.flows.client_credentials_grant.authenticate(token_endpoint: str, scope: str, client_authentication: ClientAuthenticationMethod) → TokenSuccessResponse | TokenErrorResponse[source]

Retrieve a token that is dedicated to the authenticated client from the provider.

Parameters:

  • token_endpoint – The endpoint of the OP at which tokens can be exchanged. Corresponds to ProviderMetadata.token_endpoint.

  • scope – The scope requested by the application.

  • client_authentication – A way for the client to authenticate itself.

Returns:

The result of the exchange

Modules

client